Checks to see if a vulnerability has been identified with a CVSS score that is above the threshold set in the configuration. @param dependencies the

Checks to see if a vulnerability has been identified with a CVSS score that is above the threshold set in the configuration. @param dependencies the

Validates the hashes of the dependency. @param checksums the collection of checksums (md5, sha1, [sha256]) @return Whether all available hashes match

Checks the state of the custom write lock file and under some conditions will attempt to remove the lock file. @throws WriteLockException thrown if t

Checks if the NVD API Cache JSON files were last checked recently. As an optimization, we can avoid repetitive checks against the NVD cache. @return

Removes characters from the input text that are not used within the CPE index. @param text is the text to remove the characters from. @return the tex

Cleans up resources and unloads any registered database drivers. This needs to be called to ensure the driver is unregistered prior to the finalize me

It is possible that orphaned rows may be generated during database updates. This should be called after all updates have been completed to ensure orph

Waits for the process and related threads to complete. @throws InterruptedException thrown if the processing threads are interrupted @throws IOExcept

Closes the database connection pool.

Closes the database connection. Close should be called on this object when it is done being used.

Closes a given Analyzer. This will be skipped if the analyzer is disabled. @throws Exception thrown if there is an exception

The close method deletes any temporary files and directories created during analysis. @throws Exception thrown if there is an exception deleting temp

Collect defined CMake variables @param contents the version information @return a map referencing identified variables

Scans the projects dependencies including the default (or defined) FileSets. @param engine the core dependency-check engine @param project the projec

Collect dependencies from the dependency management section. @param engine reference to the ODC engine @param buildingRequest the Maven project build

Checks whether the confidence of the evidence matches this matcher. If our confidence is {@code null} any confidence in the evidence matches. Otherwis

Configure the credentials in the settings for a certain connection from a settings Server object.<br/> <p> A serverId with username/password will fill

Configure pre-emptive Basic Auth for the host of the URL. @param theURL The URL to be authenticated by HTTP Basic auth @param theUser

Configure pre-emptive Bearer Auth for the host of the URL. @param theURL The URL to be authenticated by HTTP Bearer auth @param theToken

Retrieves the server credentials from the settings.xml, decrypts the password, and places the values into the settings under the given key names. This

Retrieves the server credentials from the settings.xml, decrypts the password, and places the values into the settings under the given key names with

Evaluates whether or not to use the `version` of the dependency instead of the version evidence. The dependency should not always be used as it can ca

Determines if the string has an unquoted special character. @param value the string to check @return <code>true</code> if the string contains an unqu

Counts the number of occurrences of the character found within the string. @param str the string to check @param c the character to count @return the

Counts the lines in a file. Copied from https://stackoverflow.com/a/14411695. @param file the file path @return the count of the lines in the file @t

Adds a base CPE object to build a vulnerable software object from. @param cpe the base CPE @return a reference to the builder

Returns true if the CPE identifiers in the two supplied dependencies are equal. @param dependency1 a dependency2 to compare @param dependency2 a depe

Generates an Options collection that is used to parse the command line and to display the help message. @return the command line options used for par

Constructs the velocity context used to generate the dependency-check reports. @param applicationName the application name being analyzed @param grou

Builds a dependency object based on the given data. @param parentDependency a reference to the parent dependency @param name the name of the dependen

Creates the dependency based off of the gem. @param engine the engine used for scanning @param gemFile the gem file @param parentName the gem parent

Creates a NexusSearch for the appropriate Nexus version (Nexus V2 and V3 supported). <p> If errors are encountered creating or validating the NexusSea

Ensures the parent path is correctly created on disk so that the file can be extracted to the correct location. @param file the file path @throws Ext

@param project the {@link MavenProject} @param dependencyNode the {@link DependencyNode} @return the name to be used when creating a {@link Dependency

Creates the database structure (tables and indexes) to store the CVE data. @param conn the database connection @throws DatabaseException thrown if th

Creates a new Velocity Engine. @return a velocity engine

Creates a vulnerability. @param parentName the parent name @param dependency the dependency @param gem the gem name @param nextLine the line to parse

Checks to see if data exists so that analysis can be performed. @return <code>true</code> if data exists; otherwise <code>false</code>

If the database is using an H2 file based database calling <code>defrag()</code> will de-fragment the database.

Used when updating a vulnerability - in some cases a CVE needs to be removed. @param cve the vulnerability CVE @throws SQLException thrown if there i

Tries to determine the product name of the database. @param conn the database connection @return the product name of the database if successful, {@co

Determines the return code based on if one of the dependencies scanned has a vulnerability with a CVSS score above the cvssFailScore. @param engine t

Combines the configured suppressionFile and suppressionFiles into a single array. @return an array of suppression file paths

Determine if the dependency ecosystem is equal in the given dependencies. @param ecoSystem the ecosystem to validate against @param dependency a depe

Determines if the target software matches the given ecosystem. Currently, this is very Node JS specific and broadly returns matches for everything els

Attempt to enrich given dependency with vulnerability details from OSS Index component-report. @param dependency the dependency to enrich

Checks the CPE Index to ensure documents exists. If none exist a NoDataException is thrown. @throws NoDataException thrown if no data exists in the C

Validates that the given file's parent directory exists. If the directory does not exist an attempt to create the necessary path is made; if that fail

Checks if the file being scanned is a JAR or WAR that begins with '#!/bin' which indicates it is a fully executable jar. If a fully executable JAR is

Uses the provided connection to check the specified schema version within the database. @param conn the database connection object @throws DatabaseEx

Compares two strings after lower casing them and removing the non-alpha characters. @param l string one to compare. @param r string two to compare. @

Creates an estimated sort-adjusted CVSSv3 score for an unscored textual severity. For recognized severities below critical it returns a value at the l

Evaluates the dependencies @param dependency a dependency to compare @param nextDependency a dependency to compare @param dependenciesToRemove a set

Executes the Dependency-Check on the dependent libraries. <b>Note</b>, the engine object returned from this method must be closed by calling `close()`

Extracts the contents of the archive dependency and scans for additional dependencies. @param dependency the dependency being analyzed @param engine

Extracts files from an archive. @param input the archive to extract files from @param destination the location to write the files too @param filter d

Extracts evidence from the configuration. @param dependency the dependency being analyzed @param name the name of the source of evidence @param conte

Extracts the english description from the CVE object. @param cve the CVE data @return the English descriptions from the CVE object

Attempts to determine the ecosystem based on the vendor, product and targetSw. @param baseEcosystem the base ecosystem @param vendor the vendor @para

Extracts a file from an archive (input stream) and correctly builds the directory structure. @param input the archive input stream @param destination

Extracts the contents of an archive into the specified directory. @param archive an archive file such as a WAR or EAR @param destination a directory

Extracts the GrokAssembly executable. @return the path to the extracted executable @throws InitializationException thrown if the executable could not

Extracts the license information from the pom and adds it to the dependency. @param pom the pom object @param dependency the dependency to add licens

Extracts the content of the license file into the dependency's license field. @param dependency the dependency being analyzed @param file the license

Retrieves the specified POM from a jar. @param path the path to the pom.xml file within the jar file @param jar the jar file to extract the pom from

Fetches the hosted suppressions file @param settings a reference to the dependency-check settings @param repoUrl the URL to the hosted suppressions f

Returns true if the file names (and version if it exists) of the two dependencies are sufficiently similar. @param dependency1 a dependency2 to compa

Determines whether a suppression rule should be retained when filtering a set of suppression rules for a concrete suppression analyzer. @param rule t

Filters the given list of CPE Entries (plus ecosystem) for the given dependencies ecosystem. @param ecosystem the dependencies ecosystem @param entri

Filters the list of vulnerabilities for the given ecosystem compared to the target software from the NVD. @param ecosystem the dependency's ecosystem